Search for a command to run...
I am a DevOps Engineer & Security Researcher. I'm currently working as a Senior DevOps Engineer at BuckHill Software, building infrastructure to support large scale cloud based Insurance software. You can shoot me a message :) consult@webspearsecurity.com.
No comments yet. Be the first to comment.
While exploring a renowned local company's website, I encountered a link that redirected me to a suspicious-looking web application. Upon inspecting the application, it became evident that it was certainly susceptible to a security issue; however, th...
In our interconnected world, where technology plays a pivotal role in every aspect of our lives, the importance of cyber security cannot be overstated. As technology advances, so do the risks associated with it. One critical aspect of bolstering cybe...
Introduction I received an invitation to a HackerOne private program. This came after being away from the bug bounty scene for close to 5 months straight. So I decided to take a look in hopes of finding something. The Target The program had a small s...
As the year 2023 draws to a close, it's time to take a retrospective journey through the rollercoaster of experiences, challenges, and achievements that defined this year for me. From career highs to unexpected lows, this year was a testament to adaptability, perseverance, and the pursuit of new opportunities.
One of the defining moments of 2023 was my elevation from a Lead Security Engineer to the role of Head of Infrastructure and Security. This shift allowed me to lead a talented team of Site Reliability Engineers (SREs) and Security experts in crafting a robust, reliable, and secure platform. The focus on collaboration and innovation led to the development of extensive automation tools that streamlined processes and eliminated manual tasks, enhancing efficiency and effectiveness across the board.
However, with every peak comes the possibility of an unforeseen valley. In a surprising turn of events, the company I was part of faced bankruptcy, resulting in the unfortunate loss of my job. September marked the closure, leading to a period of uncertainty and reflection.
A highlight of my year was reigniting my passion for bug bounty hunting on HackerOne. With focused determination, I invested time and effort into uncovering vulnerabilities, culminating in a successful third quarter. This period was exceptionally rewarding, with numerous critical and high-severity issues discovered. Moreover, I'm thrilled to have secured the 1st place in the Kenyan leaderboard for Q3.
The HackerOne conversational AI also created a funny story about my HackerOne 2023 journey. While it's fictional, specially the intro part, most of it is based on true events that transpired during my hacking and bug bounty journey of 2023. You can read more here.
Overall, I'm quite happy with what I managed to achieve with regards to Hacking and Bug Bounty this year. I'm looking forward to more of this success in the coming year.
Navigating the tides of change, I seized an opportunity to embark on a new professional journey. I am thrilled to have joined BuckHill Software, embracing fresh challenges and contributing my expertise to a dynamic team.
Looking ahead to the coming year, I am eager to delve into the fascinating realm of smart contract auditing. The burgeoning field of blockchain technology and decentralized applications presents an exciting avenue to deepen my knowledge and expertise.
Additionally, my aspirations for 2024 include establishing a cybersecurity consulting company. Leveraging my diverse experiences and insights gained over the years, I aim to offer tailored solutions, helping businesses fortify their digital infrastructure against evolving threats.
As the curtains fall on 2023, I am grateful for the opportunities, lessons, and growth this year has brought. I carry forward the learnings and experiences, poised to embrace the challenges and triumphs that await in the promising horizon of 2024.